Privacy
Last updated 18 September 2026
Here's what we keep when you use Kitokoto, who else handles it, and how to get it deleted.
The short version
- You don't need an account. We keep what you type into an event, plus basic visit stats.
- Anyone with an event's link can see it, names and answers included.
- Events are deleted 90 days after their last date.
- No ads, and we don't sell your data.
- Email support@kitokoto.com and we'll delete whatever you ask.
Who we are
Kitokoto helps groups plan things, at kitokoto.com. We're responsible for the data on this page. Questions about it go to support@kitokoto.com.
What we keep
When you create an event
We keep the title, dates, place and note you type in, and your name if you give it. If you add your email, we put you on the calendar invite as the organiser and use it to let you back in from another device. We also keep any addresses you paste in to send the invite to.
When you answer
We keep your name and the dates you pick, and anyone with the link can see them. If you write a note, only the organiser sees it. If you add your email, we only use it to send you updates about that event.
When someone else adds you
An organiser can add your email to invite you, or your name to a Secret Santa draw. We only use it for that event, and it's deleted along with it. If you want it gone sooner, email us.
Secret Santa
We keep the names in the draw and who's giving to whom. Each person's link only shows their own match, and the organiser never sees the pairs.
When you visit
- Cookies. When you create or answer an event, we set one cookie for it. It holds a random key so this browser can make changes later, and nothing else.
- Analytics. PostHog tells us which pages you visit and what you click, plus your browser, device and rough location from your IP address. It keeps an ID in your browser to tell visits apart.
Why we keep it
- To run the event you made or answered. That's the service you asked for (GDPR Article 6(1)(b)).
- To send the invites and updates an organiser asked for. That's a legitimate interest, theirs and ours (Article 6(1)(f)).
- To fix errors and see which parts of the site get used. That's our legitimate interest too.
Who else handles it
These companies handle data for us, and only for the job next to their name.
| Company | What it does | Where |
|---|---|---|
| Vercel | Hosts the site. | EU |
| Neon | Stores the data. | EU |
| Resend | Sends the emails. | EU |
| PostHog | Counts visits and clicks. | EU |
How long we keep it
Events are deleted 90 days after their last date, with every name, answer, note and email on them. An event with no dates goes 90 days after it was last changed. Secret Santa draws go 90 days after the draw.
PostHog delete analytics on their own schedules.
Your rights
You can ask to see what we have about you, fix it, delete it, or tell us to stop using it. Email support@kitokoto.com, with the event's link if you have it. We'll reply within a month.
If you're not happy with how we handle it, you can complain to the data protection authority where you live.
Children
Kitokoto isn't for children under 16 on their own. A parent or guardian needs to be involved.
Changes
If we change this page, we'll update the date at the top. The rules for using Kitokoto are in the terms of use.